$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: y/ehnDNa9VwNrhi4iDGmFMn3/UroN+nmUAIrY1xrVII= Subject key identifier: BE:A4:79:C0:5D:93:F9:33:C2:C2:B2:78:65:FB:B9:D3:41:CE:71:37 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 255176335A5653BFDB47C1F35B3070F477916578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: AD Signing time: Thu 07 Aug 2025 04:21:13 +0000 Manifest this update: Thu 07 Aug 2025 04:16:13 +0000 Manifest next update: Sun 10 Aug 2025 13:48:13 +0000 Files and hashes: 1: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) 2: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: YUgkkf3m7JulI06e6/swdHV1B/gwY13VQdXBzraHIc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 13:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:51:76:33:5a:56:53:bf:db:47:c1:f3:5b:30:70:f4:77:91:65:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Aug 7 04:16:13 2025 GMT Not After : Aug 10 13:48:13 2025 GMT Subject: CN=BEA479C05D93F933C2C2B27865FBB9D341CE7137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:46:98:75:b4:63:ea:2f:f6:85:84:e9:f8: 25:c8:01:66:a4:31:b4:51:64:7f:f7:36:11:ee:9a: 40:85:c1:e7:db:16:ae:d2:06:54:b1:11:b7:5d:08: 90:6e:55:71:49:81:72:5b:92:68:d3:36:c3:77:d0: 77:f6:ad:d1:f4:a8:e0:87:d1:0a:d0:07:f1:b3:af: 5d:72:05:4d:0b:9a:30:da:bb:c1:fb:ad:40:03:a0: c6:83:16:cb:62:8c:b1:45:d2:22:e0:35:f4:ab:52: 79:37:0e:4d:c5:8b:d5:c8:f2:09:d7:37:70:f6:2d: 43:37:b0:18:38:fd:d0:7d:5e:aa:7f:4f:47:a3:48: 1d:c1:f7:01:dd:67:d8:88:e0:4c:41:47:1d:bf:4a: 23:ed:1c:f2:64:e7:16:92:da:5c:8b:4d:da:38:0f: 25:56:5a:88:de:22:b6:99:04:a0:c5:aa:46:5e:c4: 96:f8:73:d1:86:d9:dc:5f:ca:c8:2f:c4:f9:a8:16: d5:5a:3e:d7:5c:f1:7a:b6:22:c9:35:a5:06:26:02: 58:0f:04:4b:38:7a:d1:af:45:d1:3a:18:ba:6d:8f: 4f:4f:a7:63:bf:ec:77:22:0e:c3:86:0f:3e:1f:81: ac:d2:a3:0c:50:98:f2:5d:69:67:14:fa:14:e2:5c: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A4:79:C0:5D:93:F9:33:C2:C2:B2:78:65:FB:B9:D3:41:CE:71:37 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c5:e9:1c:af:d7:4b:eb:fe:4c:15:0a:5a:03:10:d0:07:85: 39:b2:3c:ba:81:a2:9a:85:a6:c9:46:72:4d:35:80:8e:51:4f: 00:97:38:47:16:75:1e:2d:78:e1:6e:7c:c2:49:bf:e1:ae:3f: 95:02:af:bf:74:72:02:43:bc:fb:9c:47:1e:18:66:61:e0:3e: ae:ea:04:b1:ad:08:f7:70:25:0d:57:c7:0b:62:fa:60:50:a6: e1:e0:78:e8:96:be:9f:c6:72:72:1f:77:56:23:2e:d9:9b:7e: cc:ee:c0:af:09:5e:55:2b:e3:73:57:00:59:c7:25:e7:c6:fa: c1:bc:df:0c:e3:26:b8:f8:42:11:aa:0c:b6:8e:e7:02:dd:e7: e1:05:f6:17:50:0f:8b:d2:3f:fb:89:69:dd:4a:44:ab:cf:2a: 65:2b:d5:d3:f3:fd:dd:33:e4:85:aa:54:66:58:7c:9f:04:9e: 17:86:07:1f:25:9c:38:1c:cb:ba:f3:10:02:b1:05:d1:8a:59: 89:21:22:bf:5d:7a:b4:bf:8b:0c:a0:99:90:1f:30:11:3e:19: f4:5d:ed:c2:68:94:43:f3:74:76:1d:75:aa:ca:b7:6f:8b:e5: e6:b8:af:b3:9c:5a:db:69:82:49:08:51:6c:e0:cf:41:a0:c9: 57:be:ed:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVF2M1pWU7/bR8HzWzBw9HeRZXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNTA4MDcwNDE2MTNaFw0yNTA4MTAxMzQ4MTNaMDMxMTAvBgNV BAMTKEJFQTQ3OUMwNUQ5M0Y5MzNDMkMyQjI3ODY1RkJCOUQzNDFDRTcxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfaEaYdbRj6i/2hYTp+CXIAWak MbRRZH/3NhHumkCFwefbFq7SBlSxEbddCJBuVXFJgXJbkmjTNsN30Hf2rdH0qOCH 0QrQB/Gzr11yBU0LmjDau8H7rUADoMaDFstijLFF0iLgNfSrUnk3Dk3Fi9XI8gnX N3D2LUM3sBg4/dB9Xqp/T0ejSB3B9wHdZ9iI4ExBRx2/SiPtHPJk5xaS2lyLTdo4 DyVWWojeIraZBKDFqkZexJb4c9GG2dxfysgvxPmoFtVaPtdc8Xq2Isk1pQYmAlgP BEs4etGvRdE6GLptj09Pp2O/7HciDsOGDz4fgazSowxQmPJdaWcU+hTiXLW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvqR5wF2T+TPCwrJ4Zfu500HOcTcwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInF6Ryv10vr/kwVCloDENAHhTmyPLqBopqF pslGck01gI5RTwCXOEcWdR4teOFufMJJv+GuP5UCr790cgJDvPucRx4YZmHgPq7q BLGtCPdwJQ1Xxwti+mBQpuHgeOiWvp/GcnIfd1YjLtmbfszuwK8JXlUr43NXAFnH JefG+sG83wzjJrj4QhGqDLaO5wLd5+EF9hdQD4vSP/uJad1KRKvPKmUr1dPz/d0z 5IWqVGZYfJ8EnheGBx8lnDgcy7rzEAKxBdGKWYkhIr9derS/iwygmZAfMBE+GfRd 7cJolEPzdHYddarKt2+L5ea4r7OcWttpgkkIUWzgz0GgyVe+7Qs= -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:39 2025 by rpki-client